Enhance authorization for users to show channel

AhmedHelalAhmed · Sep 4, 2021 · 442a386 · 442a386
1 parent e8b0e8c
commit 442a386
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/app/Providers/AuthServiceProvider.php b/app/Providers/AuthServiceProvider.php
@@ -2,6 +2,8 @@
 
 namespace App\Providers;
 
+use App\Models\Channel;
+use App\Models\User;
 use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
 use Illuminate\Support\Facades\Gate;
 
@@ -25,6 +27,8 @@ public function boot()
     {
         $this->registerPolicies();
 
-        //
+        Gate::define('show-channel', function (User $user, Channel $channel) {
+            return $user->id === $channel->user_id;
+        });
     }
 }
diff --git a/routes/web.php b/routes/web.php
@@ -46,9 +46,12 @@
     ->name('channels.store');
 Route::middleware(['auth:sanctum', 'verified'])
     ->get('/channels/{channel}', ShowingChannelController::class)
+    ->middleware('can:show-channel,channel')
     ->name('channels.show');
+
 Route::middleware(['auth:sanctum', 'verified'])
     ->post('/channels/{channel}/sync-videos', SyncVideosController::class)
+    ->middleware('can:show-channel,channel')
     ->name('channels.show.sync-videos');
 
 Route::middleware(['auth:sanctum', 'verified'])